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(57)Abstract: 

PROBLEM TO BE SOLVED: To make the permission of 
a conditional access possible to be evaluated in access 
control. 

SOLUTION: This access control system 100 is provided 
with a resource document 40 for storing policy 
description, a policy evaluating module 10 for accepting 
an access request 1 10 for performing access from the 
outside part to a data file and for extracting and 
evaluating policy description related with data to be 
accessed of the access request 1 10 from the resource 
document 40 and for deciding whether or not the access 
request 1 10 should be permitted, an executing function 
verifying module 20 for judging whether or not the 
evaluation or realization of a condition which can not be 
evaluated only from the information of the policy 
evaluating module 10 is possible when the condition is 
present in the extracted policy description, and an 
executing module 30 for executing the evaluation or 
realization of the condition whose evaluation or 

execution is determined as possible by the executing function verifying module 20. 
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[ff*ili ] 7-^7 7 7/W-*&^£ti-Ci^7-^ 
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t^Ufr h fuf57' - 9 7 7 -f K 7 9 ± 7 ir 5 tz ft co T ^ 
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fi^W>b*mZZz\b*WMb-f?>T9-txfflW*sx7 L 

[ft** 2] stn^WT#an, mfte^y v—wffi^g 
a fffls * fc ttUJi & Hfrt 5 ft tiof - * 

u 

i mm \z , bu riwt ^® 6 ft $ nfe r * -t * 5* 
y ^-IBJfi©ff|iiSrff 5 - £ £#fc£-f sit*s l 

mux fu IS # y v—ff fl^S 7 * -fe * £ Wil-f 6 

stria* y w fi^s a» & tfnar * * tan - a 7 

* -fe X If ^co @^ (t \c x ffjffix - * (ft&^tf) 

nmm&^/^mi^m. 77 77 ± u Fjfn 

3 c £ ZWUkk "7511*51 3 (cfeftcD 
7^-fe^*JfP^7-A 0 
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T* h 5 x - * S»# fetiTc* y '>-CS6SrlfMfii- 5 

7^ir^S*§:S(tlt(tT, ^i^7^-fe^S*©7^-fe 
^^TfeSx-^{cMig#(tfenfc*y i^-ia^Srffii 

7i, ... 

mm^kft %m%L-f %tz$> ^mtmn * ^fc^ , iris 

t, ifE7^-fe^S*S:W 1 '5I-f aa^a^^-fsxx 
y 7 £ $r£tp r. i i -T 5 7 9 ± * fflm%&, 

20 ffrlSg (tft It fc7 ^ * 7 ^ i HfjfHSl# L 
fc# y i>—SB*^ ©aid £ SrflH£ LT-a-ifci-SSliJSrtft 

mm ztitzmmmw&ftmzmmt z yyyy°t, 
sx^yzTbttttzb zrnst b-tz tmm 5 tia«© 

7^-fex»^ 0 

[ft 7 ] gf|B* y ->-|BiS^©ai(|©*#<fl5*:ff 
30 ffitSxfyyi^oT, Sufe7^-fexS*cO/N7^ 

<DMm ^s^^xmmmm \zMt & ffisotf 3t)R(fe 
jE-t 5 ^ 7 y je (c^ff r b b r 5 it *if e \z 
. mm<nT9±*mmji&o 

Itmrn 8 ] tfrta* y ^-ExE^ s»JEi-5 
tuia# y v— asJt^ro^SrffME-f 5 ^7 y t°(c*dv^t 
ffft-rs r t *^Sfita*isj©*#«A-^^g(tM 

ft 5 til $ fttz£$zW r £ }^StffB^# Srfltja-t- 5 7c * 

[ft*ii 9 ] stria* y ->-iBssf> ©^srsua-r 5fc 

feraMa^mtT-t 5 ^7 y 7(t, 

50 Ma*y -7-fa^^w^^vi£-t5fc*©Mffla5fitt 
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-IBJfitf <o4M¥\£m<3\, ->xm # a* 4 fc Si^H £rfx 5 r 
ftjfE» # a** fctt* 3E Srfr 5 fc » »^j65® *r ^ -fe ^ s 

1E7 - * f|3fc v -©# # iA^4 fc tt^H fc Htffc ^77 
y°t Sr-^tr t fc sit*Ti 8 (cfE*© rnx 10 

fulE^P7*7.Mfc 

^SB^feFf^fc^- ^77^;HC7^txf 5fcfe©T 
^-fe^g^fcgrX/M-fc-fc Sf£7 7-fe;*^*©7 7-fe.x 
MT'feaf'-^ fcRSttfc fetifcfc y ^-|BifiSr^# 

fc^&at, 

fffiE*# fSrJRS-t- 5 fc * tO^a^fi^f § ftfcg fc, Mia 
fc y ^-123* ^ W^TW^fr fc*ffc5f¥«£*t£jS D 

t ^HiJfa^ y f ^.—^ (Clllff £-fc£ ' 1 fc 51E 30 

[ft**! 11] Stria 7° p^'7i (is MfEfc y |2j4 
f SrSfJ^i- 5 fc feco&ta ^flfti" 5 fc * fc, 

Hfna^ y ia3fc t> w^ff &#t£fc 5 fc * ^s^fiff 

nTlB*»if 5 fcfcfiJWfcSfeafcfc^TfWtti £fcfc«f£ 

fcifc j?t/£©7— ^77^/^'^ Miafc y ie 

B&|E## 4 fc f±£ JE £f? 5 fc fc fcfcg fc T 7 fe 7, £ 
*^fTl-5^at, 40 
ME* £ fc tt^K&fr 5 fc * fci&^fcffjIET 7 -fe 

tax- * gp#^<73# # fc * mn-t s «ta t 
4rfr?E 3 v fa - * f- Hff § 5 r. t t fc 5 ft * 
« 1 0 (cfa*«fatt«fro 

[ff*ill 2] s^tfa.— 

-h >fe TJffe <D 7— 9 7 7 ^ /Wc 7 7 -fe 7. i~ % fc fe (D T 
7"fe*S*£S:fctt-t7-fc ^Sl77fexMfcc077-fe7> 
#*T* h 5 x - ^ fc Miltt tt n/c ^ y ->HEi£ ^li 

tswt, ^^tufctfna^y *s-mm^n$kw%m 50 
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ffi-f-^^at, ®#$ftfcitfrf2zKy v— tsazE^ i^^©* 

»S1-5fcfc(73^a^fltT$tL^^{' s tulE/K y V—fE 

-fe ^ g*£fp "sj-f- 5 5 mm t %n'<7 z * 

Ifjiaiait^ix^^mifa^^ ^7Alri*tn lts'St'p 

[ft 1 3 ] mtafait^® 1- 1 ats $ tut v n 5 7 0 o ^ 

7 -Mis Mta/Ky ^— lEiE^^^SrvSISI-Sfcftcofe 

a^ftp-rs/cfcir, 

y i/-fai6^co^^£-f 57cfe©^a^#iff 
■sri^t* 5 ^^-tij^-rs^ai-^v^T^ffl^^nig 

(ciD, K07-y7 74'/^i i ^ tfJfE/K y IE 
mjfE## a^4fc(±^M^ff 5 fcfefc^^Hufar ^ -fe 

^s*fc»i-5T^-fe7if «i©@^*s(tfc«^fc, m 

far - ^ t ;A^4 fclS^M *Hff 1" 5Mi 

«r ^ y ¥~~9KWn^Z> c t t -r 5ff *5 1 

[st*3i 1 4 ] *-(Dy-7T-ia^$ttfclt^fcii t 

W IE *° y ->-WE3£ fc^iSc-T 5 p/rS © T ? -fe 7 Sr g (t 
M(tfc«^fc, SflfE*#^SM^5fcfe© s 7t^y 
h Sr^lfe-r 5 Srff 5 5 if 5 -i^ga^ 5 t 

*fc, ai^a^feStflJifLfcm^fc, ^fMIfg^ff 

?>'t±s l t M ia^# *«j£-r s fc * co&a ^ mn $ -fr s ^ 

ffiffi^fcSSJE-rsfcfeco&aj&sUfi 1 $tifc±I^(c, iff 
tar ^ -fe 7 [c M L T 7 7 -fe ^ SrfF Wt" 5 ^ t Srfl 
fc 5 r t Sr«H» i f 5 7 7 -fe ^ ft W r A c 

?rfflfeatf^feiiSS^-i: t) i^5&#££fo 

jk y ^-faiESrt&ijfi-rs^a t , 

SufE*° y ->-|ai4fc-a-^-r 5pJr^ro7 ^-fex^jJtSrgft 
M(tfc±I^fc, l!GSa&#4:»J£1-5fcfe©, fc»(c«^ 

s^L^afeatf^a^tr 5 ^I6^fc5 5 
5i*fc, ss«g^fest¥ijKLfc±j^(c, ^mmm 

wie^ fc^ia-t 5 fc fe ©toafc'Ufr $ ti fc #a- 1 s gr 

IET 7 -fe ^ 5*fc*f LT T 7 -fe ^ fcffF ^fc 5 #S t fcii. 
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ttttfc«l3i^ MfBsfefrSMi-Sfcft©, ^»(^T^ 
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^mm&m^&tfum^^x, %U7?±xmm<Dm 
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fem© T ^ -fe p WrA, 

-feXB#c^-f -A^^>-7°^T^-ir^.JlKt LTfff at? 20 
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K.^^k^mki-^T^±^.Mm^^ ; rK 

fl-Sfl £ >fc bu iS-r - * 7 r -C /He T ^ ir 7, -f -5 ft <D X V 

-fe*£*££ftfl-»fc:> ffitay y-* k^*^ ^ 

•V-fflftt, 40 
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[0001] 

tt 5 *° y ->-t aa! ic Mi- 5 If fl t ^ ix £ H^-f s ft <d 

m^nmnkzftotfmmirz,, 50 
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[0 0 0 2] 

tCfctfS^y ~>—C0|Exl!^t LTIl, ATT ©KeyNot 
es [BFIK99] (PolicyMaker [BRL96]) , GACL [WL93] [W 
L98], ASL [JSSB97]/£i*;iS£pktlTV^ 0 7"^1r^©Bj 
S^J^-f^fcft©^— yu-CfeS, rtv£)©^y *s— IE 
i^H, V^-ftbtT^-fe^. • nyhn- /V • (AC 
L) iRffftvS (Subj, Obj, Op) ©3ojffi.!J *>&H 
*tLtV^5„ mit, T^irxc7?±#: (Subj) 

(obj) (c^-lt, fc^lftf^ (Op) ^wsix 

LtACL^Mft5if!®S&5 0 

[0003] ±is©*? y s^-iajfi^atftt, ^^^ffim& 

fti" 5 it ft fc, ig^trfto fc/^-y-ryfy /§r|S^ 
■C#5i5fcU $b{^, »^PS£i-5*#S^»< 

fcfttr, ACL(Subj, Obj, 0p)^Cond(Subj, Obj, Op) £ 

■R*lc*S(t5ifee,^5 3om^l-*fJ£i-3ACL£jBS 
i-5©(i^^*^T*fe?) LBSIt?fc5©T\ iE^SrlV^ 

[0004] ACL tfcft 5ffl#P*rtt©»f^O|B 

3i^ffi^(i2fifflfo5o 1-!fct>*», ffSti/StWP^W-Sr 
fa3zEi- 5 1 © £ , * -5 Sktfs £ fF S Ji*v ^^©^* 
SrlSiBT^StroT-fe^e tu#(iP«#{5tft (Closed w 
orld Assumption) £ £ Jdffi V fctb-5„ MWlH^T' 
(is fe5T^-fe^5*^#LT, -?:JlCTj6t?iACL 

frte^m&izit^'D&mmzft'te^k^om^te 

5„ LtiloT, ACL(cW$n5ft{^rc(t^fa»LT 

GACL^ £ 1 ^ V ^ # , W ^ ©Kfcf^iSJtS 

$ Jit V > ^ V vj % ^^-f £ fcDef ault^M^ 
m^frlXi^ 0 

[000 5 ]. #y iy~<DWm^m^z 5 LfcHmiifeS 
t©©, ^*©#y is— fFlB^xAfi^T, /Ky->- 
Srlftf L7C^4-Y e s * 7C(±N o © 2fjtTSSi-i 5 \C 

LTv^„ oil), KPp15:?-acl (subj, obj, op) (r 
Stti Sfciio©v^-fti^^©'i:^S'5„ 

[0 0 0 6] 

<DT?±x Mm \z& 5 y v— ©f¥ffiS#f (4, T * ir 
kftX%f£i\ r©/cft, fc5*#Sr«6fe-&«Ye s 

(Yes with condition) £ 5 i 5 ^iS^Srff^ w £^ 
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[0 0 0 7] Z<Dtz$>, 7— ?CD Bf-PHt;-^ 7t-vy h 

[0 0.0 8] *S§?miy7© J; 5 feftflfttWW&*8H- 

£¥UfSrf 3 feftTft < % 5 ^#^fi/c^iiT * ir * £ 
fF1~ i V n 5 * © 7 * ir * ff T5J £ IWr? § § i 5 

[0 0 0 9] M(c s or ^t^fpsrfcas^-ciff 

[0 0 10] 

T-fe57-^ KHiSftft fcirfctf? y SUISSE Sr® 9 ill U 

5d»Sr*3fe-T5xi?y ^-ifffi^at, &y m^/ec© 
nffMB 7- t & v & h z> *a* , r. co $#offFtii $ yt 

[ooii] ;rt\ iWr^ati, # !7>-fflW©# 
«f oflWd^Jt 7 fiffMBT # 4 v ^fH-*tr 5 ffNffi £ fc fi 

It Xfaffi Ltc y * Mr M v ^ 5 r k ifi X # a. 
[0 0 12] Sfcfcttfr^Stt, fitf«H^IE¥SkJ; 

5 wmt. it imm * mn-r s fc » tt©^ * # 

T-©7-^#^©7^ir*g;££3S ; fTU 
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* ±^MMxh 57-7 i-MS#it b*tfc# y v'-isiB 
©i¥« * fc ii^?a <ry it » SdiKi m r y -t ^ ^tr 5 

wt*SBItl^:/ t c5^-C*«^^TV^5 c> jSJ, =f—9^k 
ft, 7^-fe^*T^-efc55:»Oftllc0^ v 7:-feoTt, All 

[00 13] r<7>mtT^Sl4, 7-^77-l'^4 l ©f§ 

io \z 7 ^ -fe ^ if * zmn-r z # # jwt* ^ tB^® 

20 MLSr#-e*>5»&H:f± % XMLf-^tll/v-;^ 
f^y-iZ^-efr fc Jfe XM L ^ 5 % 7 — ^ 

[0 0 14] *fc, *5SW»» ^-fW^FJT^©x-^7 
7-Y/K'7^ir^1-5 7ta6©7^-k^S*SrSltfttt 
T, 7^*^*t*-Cjb59 f ^fcH*f*»t btlfc#y 

7 ; 5^^*^i*S75 7^-fe^$lJ^fek*3V^T, 7i> 

7^7'h $ tufc aK y "y~tm + ©*j+ 5 
XTyZfk.^ m% $ Hfc # y v—123* 4 s Ic-t © * * t? |4 
If ffi 7- # v & h 5 « -a- , r © ^vISS -7 5 fc 

o&ft&ffiSi-t z> tab (Drnmamn ^imxh z twmz 
m^(v±x(D^mcM-rztm^^it^x, -cdt? 

[0015] #y ->-Ei!!^©^#^ff{ii--5 

*IliJ *^W75 ^ 7 jy 7° k , ^ffl S o*#*fS *■ 
fFffi-f 5 ^ 7 y 7° t v r <7>*lIiJ ©^fr SPdS ^ © 4 4 T* « 

50 z(om$%M^ztcft<DmMtfWffi^ifefrk°?fr%m 



9 

m^tm-r 5 * x ? ^ic^o -c, 7 * * * 

fUJ i 7 y -fe * fF bI £ ft 5 # U S/-ftfllJ fc it h z> m&ft. 

[0 0 16] jjfp f23£4 5 ©IP^£Si£:T ; 5 

Ztvtz, *Ky 1534* <7?1f#<7WcSoVTfMW-5 
c i i s t? # ft v ^1 RiJ © $ # © H & S 1 t # 1 7 T , m * © 

tit ^ 5 £* 5 £ W£f 5 * x y 7° b , r ©## 
JE-f 5 fc ft ©&WI SrflWT-f 5 ttit ^ffl;© * *i/CV 5 £ JRI 
JtLfc*^, c:©«fg£n?lJ^Ux*x;y:7fc£#fj>r 
^Milt^S, sH+£«£x5fcft©4&a£$tfT 

- * > h a Sftfr t # 5 £fr t Sr Migtf X L fc y 7 

[0 0 17] xKy fBxfif ©*#£#§£t£ 

fcft©&g&fltfx5*xs':m N r ©aKJJ fBiE^ 
©^#5riiST5/cft©^S^fitf RTtB**4f b fr^M 
t57,f 7 7°tc:*3^TRf tfffl Six/tttllUc <t 9 , FJr£© 

f^^r'f^W 1 ^ #y v— te^w^fti-s-^v 

■C#ta**fc»«3ESrfr 5x-*g»#£fctii1-3*x 
;y7°£, *#a**fcf±£JE&fr5fc*fc J ^fcT*-fc- 
* g# £3Sfrt 57,T77t, r (0* # 4 tz 
$r tf 0 tz ft Sc-ftg ft T * i? * gjfc 5 7 ^ -fe 7 ff bX 
©l§IflPS:Sftfc»^»2: v x-*3fB#~«©##&^f:fcW: 
&W.*mft1-ZX7 L y7b'$:$ttZ.biifr&b LTV 
3, (Si, x-^^ifl, ±3*Lfc±5^ 7 
#JTfc 5 3t*©ffi©^Tfoo T h s ffi©:t*©FJf£© 

[0 0 18] ttz, *|SK'fl, s^fa^^t^fTS* 
^) 5 fc iff j£ © ^ 7 r <i Mc 7 V -tr x -f 6 tz ft © 7 ^ ± 
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Mb, J5t#*ixfcsKy s^-IBiEif ^^©SS-CttlWe 

§-ftV^#^fe5^|c, r<75^fr^?l£-f-5fcft©^ 

fcft©^LS^fitf$^fc^ic s jj?y *s-K3&$to>±x<D 
*#^SH"5W<ffiBf*H:j6D-c N rco7^ir^S*^ff 
Rfi- 5 i »5« »Srft3£i" 5 feS i => > f a - ^ t ^tf $ 
10 tfSrfcSrWffcfcLTVS. r©i5(-1-H«\ ^©7 

©7 ^ -fe ^ FF^itci^js-r 57^ ± 7W immjii- a r. t 

[00 19] n-r-e, 7n^7ACi, zKJJ v—ExE4'© 

^^©Afr^ss-tsfcftw^a^fifr-sit^^ 1 5 

®7-^7r^/^^P>, ^-IHi&f ©*#^S-3 

S*^3§tTl-5^51^, *ta**fctt*JE'*fr 5 fcft 
ft 7 ^ ir 7 fcJH" 5 7 > -fe -5J © 0# §r S 
(tfc*-a-}c, x-^gf5^©#tii^Sfc(^M^Hfi ; 

1- 5 *m t * mm => > tr a - * te*fj § *s r t ttmw 

K L 3 > tf a. - $ \ c jj v ^ r x * It # # © 7 ^ ir 7 ff bJ 

[0 0 2 0] *3gWf±, a^fcTa.-iJ'jC, 

30 bfftfetDT*—? 7.7 4 MCT y± 7tZ>tz)b<D7 1±7 
W^&gil-tttfX, z\<D7?±7^$z<DTt'±7tt%tX 
hZ>7—$ (-MiS^ tf b fitz aj« y ^-EJfcSrRft-J- 5 «L 

a<b s v— ©^srffiii-s^ya 

ftv^*#ass>5»&fc % '©^#sr^£-rafcft©^a 

t a ft ©8Hsas$WT wfgf t t-y if $ > 
^ ^aa ^mi-f ztmt, r ©*frSr«ifi+ 5 fc ft 

40 fcJH- affFtt^mt-JSCT, r.t7^T^-fe^^#4-ff bJ1" 

vtt z iBtt^a t . . r oE«^aa> & ^©t°p^7^^ 

■CV^S. '©j:5ft7D^7>^e^gg(^J:i9 N 

7 A (D&mm b LTCD-R OM^©|Stftffi*Sr^1- 

^igtftSo 

[0021] Eli^^tEtI$fi-cv^7n^ 

50 ?Mf1-57tft(r, TKy ->-taa!=p©*fr§rSIS1-?,fcft 
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a*-* fc i4^ 3E £ft 5 ft fcifcS * T * -fc * i- *H- 
[0 0 2 2] tfc, #*PJi4, ¥.-«y-^.T'|BM$tu 

7 *~ v y h Sr^Jftf 5 ^a^ff 5 ttlfgds fc 3 a> i* 9 a> 
©HtllrPf T>'t±S UT*»*»5*#S:jlrJ£i-5 7c ft (Oftl^r 

nfr £ * 5 ^ a <t , ' <n m$ * m&-t 5 * © %hmt) m 

^W^rSrfr 5 r t a* bTI6 i 45. 
[0 0 2 3] £7c, #3PJf4, T^ir^M^Tfc55:» 
fc«^®a»L&ffiftjMfftE>ffS&^£: t).4rrF"5Jl-5 k^ 
5 % #o # y v—IBife SrJMrt-f 5 3M£ fc , n <75 jK 5 

ix- fflM ic-e-iH- 5 s r * -t * * s it ft it tzm 

-©«fga>fe5 i¥iJI*TL7c»"£l;i, -©fi|fg£fW 
ffl L T a » 5 * ft Sr jft JB -f 5 fc ft ©&« £ Hfi 1 $ * 5 ¥ 

st, ; ro*#sr»si*5 fcft <nmm$mn £ ^fc4§3- 

L & fift & tf £ 2: £ £: L T 7 * -t: * Vf^Zft o^k 
It 7? ft 5 o 

[0 0 2 4] 3=fc % *3PJ!I4, 7^irx*hfeTfe&;£» 

a Ik, rl ©*°y s^-iBSfiJd-a-a+'SMSwT^-fe^s* 

#(£7^1r*®ffi£##3MH&a&.fT 5 3 *» if 

S^&P^Siifcfc, £©«f^ft5 2:WIfrL7ci§^ 

^a^nfT^s^at, ^co^^^-rsfcftcoM 

-tr*£l^T1-5^ak£ffi;i5- kZWmt Ltv^„ 
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*fgtc*3V^T, £©7^i?*SK©»tjA^£ff5fcft 
©£#-© T * * x fcffWtt 5 ^a Sr IE i-ii ^ 
3rtS:^i:LTV^. Z © J; 5 tc-ftLtf, S:»Sr.T 

Sr» S w tf MM it T ? ± * t o tcXmx t * fcgij 
10 ©i#©— S-Cfco-ct'J:v\ 

[0 0 2 5] *^0J|4, T^txSiffcSJt 

20 fcft©^a4:*tf $*5^at, r©^#SrStJ£-t5fc 
. ft©^a^HfT StLfc#-g-(c, :©7?t^stl^L 

[0 0 2 6 ] ^fciC^/Cs 7-^7 7-f/H: 

fett § jit v ^ 5 x - 9 K. BBSf-f 5 SK JJ E3fiSr*Mfl L 
fey y-^. K^aptyht, Wi^icf'-^r-f 

y— ^ v ha^r©T^-fe^s*©T^-fe^M 

5 * y ^a t , 9 m £ fitctf 
y-y-tsifi^ic, jjfy i/-mffi^m&w^m£rtxi$ 

-it?, * y ^-wffi¥aa^-oi»#7c:(tt?i4fF«T'# 
* v Sri¥« * it ttzmt 5 ft k t l t 

40 7nxSitfc5f-^77^/H^f57 

^ Hfrt" 5 r t a^T 1 ^ ' *° y 

r. tt fe ©*#Sr#oT ^ -fe ^^jRas^ bT $ ti 5 £ 
iiac5 c 
[0 0 2 7] 

^m^^x-<D%m^mm\mmir^ 0 t-r, *iibj© 
HEg^tftBj-rsi, *55Kt?f4, T^'•fe7'^flJ^^p(c^ov^T 

fir 5 *° y ->-fFfffi©IS*§r, X b ft Y e s 4 7c 14 

50 No©2jl-ei4ft< , 7/-;uftlfe^J;5#«i: t, to 
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Srlf-thenSI/P— yUcltK U ^oMiltSftSilfll&ro 

fry, d»o, #i)^iftoI^tt# % l&S3!wm<0# 

[0 0 2 8] Ell (4, *HJ£o^#jc:fc(t5T^-fe^$iJ 

5fc*<£>0T?fc3 o IHBU^^T, f£-5§-2 0 0(4^-^ 
fit- ^-efcS. #-§-2 10Hf-^77^;K'J) 

#■8-2 2 Olir-^fit^f A-efe!3, x-*^ 
Ifcfcfc'ffSU tftSR#©f— Vx&m&tS. ^2 3 

0 fla - -TBliEf - /v / XtA"C|) 9 , 3£ift $ filt » - if 

£>y, a-— iffgliEif:/v';*7 L A2 3 0 #5£<7>^- 

-if K i « #f©7 ? ± X m#tc »t £S ttfrYt T , 

^ fIt7'i^fA 2 2 0 f — tf ^ £$IJffl7? 

2 0 0(4, T^ir^.flJftf-^^-rA 2 4 0\c£.%Tt 

@^co$|-CF4, pJrfecoftffiy T 4 3 0 if CO 

1 d & fj&jfrf 5 ft © S Ka.-f^Bf Hi 1 * aiiwiaii 

[0 0 2 9] x-^faf— ^2 0 0KlfMfl$n-C^5 
EFfacox— ^^♦tT^ir^LJ; 5 i1-£^-if (4, 
ST> ^-if<^*5 0 O^fef^taf— '<2 0 Offl 
iff&Hif 7"'>XfA 2 3 0 t^T^ir^. LT^tA 
^P^^-fSo -COl^s a-— fffSSEf-7 % >^'ri>s2 3 
0(4, A?* 57- KO^^W^S^j; y, S»a-fjJ 
SS^ix-CV^^-if (WS^T^Sx-^^cSfc 
T^ir-xasfF £ttTV>3^-tf) *»ir5A»S:*|»rf5 0 

?±X%imi-7^XTJ><2 4 Ol^LTBfrtSo T y 
i?*flJ^if:7^>*xA2 4 0(4, ^.-ifBfiEif :/->-;* x 
A 2 3 0d»foS»tlkofcn^ ^flSfW-^SRT^-fe^B 

s f r c t , iai^H^Bf m it mm * xt> l t r y -t y «r 
(c 4 s r y -fe * ^<D^m<om^ ±7, £ h 

fc»g-f4, 7-?flf^->^7A2 2 0(CioTx- 
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fctiStl, T^-fe^$IJ^if7^>^7 i A2 4 0 4-^-Lt^-- 

T^ir^f|!ltfPif7"->^xA2 4 Ott, *° l> 
1ES6 <D £fc 4 o T (4, fg^ ffl § fltzy 1 -^ Ltz 

[0 0 3 0] 02(1, **16©Jgltfc*5»t«T^-fe^«| 

fc\ El 2 (DT^-fc^ftlJIlPv^xA 1 0 0 it. El 1 (DTP 
10 -fe^ffjlJfPif 7WTi 2 4 0 {^B^-tSo mia^*5v> 

fctLfe/K y ^-BT&ZWffiT 5 0 ^F-^ 2 0 l4fWT«tl^ 
Kt^i-yi/Tfc >9 . *° y v— If fi^e c^n.— )V 1 0 dS^p 

0 liDtfr* ^3. -7UT*fe 19 % fifTaig^EE^e 2 

(1, ItT^^a^SO^fffeSf^tl^ TKyv— 

fFM^e^a— /n o^fcgcj-Siofc^^#cofpffi^ 

•9 Rf^^co^T fc^lE-rSo 40F-JM 0 (4 y y-^ K^r 

7A1 0 0(4=3^t°3.-^(v:T^|i$tis ±fa#*5?a 
30 -^H4aK=^t! , 3.-^|c±flE#<aaSrllff 
(7)y°a yy^VzL—flst LTM^&ti&o 
[0 0 3 1] 1213(4, 0 2^(t^$^7c., 
10, 2 0, 3 OfcAW^^ixSr-^Wrt^Sr^Sti- 

s^a-/n oia**n57^t^i io, 130 

®t#fiSc(4 (Subject, Object, Role (orUid), Operatio 

n) x*h <o , *i WAS* 5? = -yp 1 0 frit, &tmm 
mu*i>^-;i<2 o^&bti&fim&ftaotimi 1 3© 

MlttttD^F {Condition-List} Tfe »9 , fltflStg 
40 ^E^-^3.-yy2 0i>bW^J^r'J^—^3 O^bll-S 
Dvff Ji^ l 2 l ©fllfigiiWr Srfgj^-t 5 x- ^ ir y h 
{Instruction-Set} T*fc-5„ Sfc, <Kyy- fFffi^v 5 

oici y y y— x K^y yf4 o^b^tti 
^tt-S^y fE3£ 1 4 0 t , 01©7-^77^;1'2 

1 0i^T-?flt7'y^7i2 2 0 Sr^-LTfVfT^ 

•ya-^so^IbltStti 34t, ^fr^-i?a-7P 

3 0^bf-^flt7'yXTA2 2 O^Uf-^ 
yy4)V2 1 0-^btt5KiftflSl 3 3iliXMLj 
* (XML Document) T'fc5 0 *° U ->— {f^t v 1 ^ 

50 -;H0, ftfTttflgftEE'E- v 1 ^ -/u 2 0 RXfWf ^ 
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2, 12 0, 1 3 1 li7^t^I*CSt5^rF«I^S 
■fx — (a string of "denied") Vfo<9, tfD-is— 
fFflr£v^-/W 0 tB7J $ ft 5 77dr XffHTl 1 1 
itT^-fe^^^^j-f-SfpRj^^-fr-^?!! (a string 
of "permission") flfi^-y^.— 0/)^j±j 

^^5!)y-^l7^3-Kl3 2!iHTML, X 
MLfCtt^T-^^IJf (HTML, XML, string, et 
c ) T-fc5„ 

[0 0 3 2] 0 4 (4, H 2 id^: Ltz#MM<Dftm\Z$3ft 
Z>T?±*$mi/X7-J± 1 0 O^T^-fe^H^Sr^arf 

£tl3-il<©^»4, ^--Hf-^^OT^ir^S* 1 1 

SI<DCr T T'#^<7DflfT^-^ 1 3.-yV3 0 fc4 19 23^k3ij 
$^5T^irxg*i 3 0tci9|?»fl<jfcjaft&Ji5. 
7^-tr^ItllO, 1 3 0 SrgftftltS jKU v— 

\ctt&i-z> t° y v"-ia3zfi 1 4 0 £ y y*=L/>y 

4 0d»fctftJUL (^rj'740 1) s ^©Tifyv— fEJfc 
1 4 O^ffF-frfS (^7y'74 0 2) t -^LT, ±TO 
t°V v— |E3tl 4 OOf (O^ft^ffrtf^rtg-^fctttf, * 
<7?f¥jffife*i^DTT^dr^fFBll 1 1 47cJ477dr.x 
^fFWl l 2fcv^5JS*Sr % SSr^t^Sti io§: 

ISffLfca— fJClU^i-S (XT5'7'4 0 3, 4 0 4, 
4 0 5) „ 

[0033] rtikifru /KU v—fEifci 4 orotic* 1 

y i/— fMB^v^ — /Ul OtcttTf4f¥ffiT't&U^#75* 

^-^-/n O^fefi^fg^liE^e ^2 o-^gp 
*#OtflRl 1 aiSflEStia Ury/4 0 3) 0 ftff 
0S4, v-*xAft(C||#£tl,T^ 

fl^tfe^liE^^^-^2 014, fl-as&ftOffif fg 1 1 3 

ilfT*v : ^-/V3 0&tftsS-f3 Ufy74 0 6) „ * 

£\ T^-tr^^f T Bll 2 0 tV^g^^aST^dr^S 
*l 1 0 SrJSfrLfca.'— tPttlHlffi- 5 (^x'>7°4 0 

7, 4 0 8) t 

[ 0 0 3 4] Sf^fP^ft^Wtf LSfcttHm-e 

RXFMMtfftfrlnZ {^7-yy°A 0.7, 4 0 9) „ fit? 
£»± % y y-* f7>/3- Ki 3 2isw$n*i* 

# y v—ffii£ 1 4 0 roffHfitffficfi 1 $ ^5 7- y 7° 4 1 
0) . tLT, ftj*WH3l?y v—fBi£l 4 OCOf o£"C 
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3-KI 3 2 idt^rydr^ffRll 1 1 fc^$flr*&i!j 
.j8r*-fe*g#l 1 OfcSSfT bfc^-ir(c@f:t5 0 * 
fc v IMT*s?.a— ^3 0 5SK^*#©ffti5<& 
fel^s T * -fc * ^Ffr WCJb 5 #g\ 4 fc ttftfr* ^ - 
a> 3 0 ^Sft^*#o^(c^Lfc«^i4, r 7 ± 

X^ff«Tl 3 1 i:V5M*Sr^fiET^-fe^S*l 1 0 £ 
^tTL/-c^-if~(^®^1-5 (Xr->74 11). 
10 [0035] $tfr=es?3.-;i/3 otoMtja 

vvf, SfMg|5*j4 :: lr«fc-r^fc(cffic73S:#^7'^dr^ 
*f^T?fc5S:»f ©ftiicodry ix 3 VtxtLTZ^dr^^ 
j6Mf**g-H: % 7^t7ftl3 0 SrsK U ffflS*^ 

5„ Ceo £ 5 ^|3^f+^^fc1-fcfe^fTt>a5S'Ji 
«] ft T * -fe * g ft £ T * dr X If rT OfFftttfe i "t -5 

;^f-/<t7^ dr^ LT^^'ff r. 
[0 0 3 6] fi^O^ev'a^HclLT, 

(-4 5^°y ix-©wffiT7u=?y xj*%&mT5 7v'— s ? 

•t-hTfcSo H 6X170 7 (4, *°y i/.-flZffi^^^-- 

zmwi-zmx'hZo msz&mi-zk. 4-f, ry-t 

30 1 OSrATJLT/^^-^SrSltSlS 

7501) „ T^drXS*<7)#S;i4, E60T7dr^g 

£#l-f Tydr7^S*f5±fr 
*if) $r5RS'J"t"5x— Subject t, Z^dr^ 
*fft4-|t»J-f 5f-^t*fe5 Object T^dr^>fd-^ 
t*M _ 5*f^*|«»J1-57 f -^-e*>5 Operation 
'V S„ ^(4, rSubject^Obj 

ect(C» LTOperationCDlisf^lS (7 7 dr 7x^f) L 
TV^SJ $r*ft-f5o- 4fc, g)6tl4, 77drx^*o 
ftfrTO^IH^^HT^t), Subject^Nihori Taroh/IBM/J 

40 apan"Cfe!9s Object^http : //admin, trl. com//form/exp 
ense. xml"Cfc V , Operation^read (html) X*fo 5 4 5 ^ 
7^t^g#W^Jlfcri^LTV\5 0 ror^t 
^M*I4 TNihon Tarob/IBM/ Japan t ^^ 5 t? P 

7V y Lfea-- 17^\ admin, trl. comf— 
V^Sexpense. xmli:V^5 7rd'/H^Lt, HTML® 

fc\ rr-eiu*tr^t^5*i 1 o t Lfc#, 

dri7^-/U3 0A»&tiJ*§nfcT^-fe^S*l 30^A 
50 [0 0 3 7] W;, iJy-^K : ri/yh4 0©ttl& 
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7^t^St^7 ^-^ <D±X(D/< 7 ^ — ^ (Subject, 
Object, Operation) fc-g*t<5aaiSrtftSRi-5 (*T 
J//5 0 2) „ ^LT, ttttlLfczKy v-HSIIJl 4 0£ 
A7l i: LTStt^iSo # y 5^- #UiJ©*3;ti. 0 6 COT 

sj=l— f^mil-tZT-fX-hZ Subject 77d? 
^.I^'sr^SriStSiJi-Sx-^.TfeS Object i s 7^-fe 
^ffBjjS{^Sr!^ij1-57 =? -^ Operation b , T^ir^ 
$rfFWi-5*#«fa34-t?&?> Condition i£/<77< — 10 
^tt5o rcO/^7^-^fl, rcondition©^^^ 
$ tUTcflf, Subject^S0bject(-jt LTOperation©^^ 

i/—%Lmf)Mc&Mfim%£lrhX& f 9\ Subject^emp 
loyee7?fo D , Object^http: //admin, trl. com//form/ex 
pense. xmltrfe 'O s Operation^ s read(html) Tfe "9 s Cond 
ition^transcode (in, out) X'fo 5 =t 5 !1 v'—^IUJ 
Sr^LTV^5 0 r©^y->-aili r e mployeeil^ n 

1?4fcttT7°!J y\zMLX, x-^SrHTML 20 

t^lfe-f- SCI t^Tr^Sil-g-klRBtK admin, trl. comir 
— /^(eitt/i^TV ^5 expense, xml t V\5 7 t 4 L 

[0 0 3 8] Subject, Object, Ope 

ration^it^-t^m^-f 5 r t T?fc5„ $!;tff , 
T^-feT-ff-ii^^/^y ^ — ©Subjects 'amano' f£ h 
tt\ T^ir^fjflJ^^y v'HIUcD^T* 'amano' £1^5 
^3-— If/I D^y 3 'amano' gr^tf T R L b ^ 5 TVl'— 

[0 0 3 9] £/c s T?-tX®mtfV v—^llJW^fC 

fcv^ — *£«£§to1$IE£mv^fc£f^ y 

^^HcDM^-^ftE^^llT'fe -5. Environment 
7<— ^£1~5 0 I»^7>- ^fi, rEnvironmentll* 0 
y v/-ir«^*i ^Iftt5 D *fc N 0 7 
il^-^Wi^^f^^ttTioiJ, Nihon Ta 
roh/IBM/ Japan t 5 if ^employee t 9 D — yP(r. 40 

ft 5 r i tfs-e#3 t v^5**^iti»r-^ b tT#ffi-f 

S*(-fe^)Nihon Taroh/IBM/Japan t V> 5 ^— lf## y 
flLUJCDemployee t V ^ 5 u — o tc=^—f b 1/ ^ 5 

[0 0 4 0] ^IiJ^HMat LT S Xr->7°5 0 

7"5 0 3) □ Haitf, ^y^-MlJI-^g^m^^H 50 
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x^zm&it^(DmyGmm-iE^<wm£thz ) x.y}z& 
b ^?fr~fr%mnLxtfyi/~Mm%-^icftM 

5o 0!lx.lS, ^ttlf^y ^-W^(j:«^ft(cT7-fe^ 

[0041] ^[^, 7.xy7°5 o 3-eMa^tt/c^y -> 
-^l«co^^{c y y-7A K^r^.^ y h 4 o ic#^-f5 

[0 0 4 2] 7^[r, ^fy/5 0 3 WffFffi^SrflJS L 
(^5-75 0 5) , ±T©*#*Sfrffi-5rtM-efct)i5>o 
±Ximbmffi£ti?>Wi-£teT? J kzff^b1-Z (Xt 
775 0 6) „■ ^-C£75^#^fFffiWi^Tfei9^^o 
— o«±cD*#^m t Jfc 5 « -a-ttT ^ ir 7 ^Fff pj 1 1" 5 

h 5 SSIffET f ft V ^#7clt A» b fc 5 ^SP* 

lit^^fiE^ v 5 3. —;V 2 0 — frmi-f 5 (Xf y75 

0 7) o !7®«t©I»,l 

^^©flO^ h-efc3 ExternalCondition Sr 

jKy V- ^IlJtDConditionCO^T', St*X— jKy 
v—fFffi^ 5?a -/t-CO ~>7fA BBS* o TBPB#i' 

Jtft**IJ»f-C#^V^#J 07 (CIS 

*rSP*#©*ft:0iJdSfE*$HT:*3i5 x HI 6 ©77t7f 

*xif *° y ->-*iijJ*f¥« ufc^s, # y i/HPrffi* v> 

3. 0 fi^miWiitmtt 20^ expens 

e. xml SrHTML 5 - i S if 5 

fMiE^e 2 0 (Dttm^Wfi L/cflii, $Mf * 
-yU3 0iri5^SSrgTStJ^°y v— W-d^^^-zP 

1 oMmmv . M&#)temmffi%<Dmfe&tj:£ft 

2 0*fciiiMr*v^-^3 0(c^v^xaiSMl5*#^ 
^°y v—f¥ffi- : e^^-/H 0|iI5ii*< 77ir7^ 

[0043] 0 8 tis mfmMmm.^^^~^2 

XhZ> a 0 9(i, #ifTflt^fiE-ev ; ^-yU2 odSfflv>5 

1"5 S1 2 , *°y M^v^a-zn O^^^ttt 
fc*##t7 V ir xW^I(c*5it S^rSP^ft ©t*$R^A7j 
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V^fltf^v 5 ^-— yl^U X hfrbs flff^-v^— ^3 0 t 
LTSik^tbrv^SComponentCOlffg^SD^ffl-t" (7/ 

0 „ mft^j-^—^v* hi>*h%\-fWLZ>$tfT 

t, ^MI7^t^MO^T'fe5 Condition E 
xpression t , ^{^^STf 5 = *y V <D^M 

Sr^-f Capability i, a Vifs—*. V \ 

Sr^i - Component Name i, =ty7$— ^.'y \-?>B\WcXh 
5 Component Argument t %.s<y 7* — ^ t~t^ 0 EI 9 10 

Tio D , Condition Expression;^ transcode#type#l (*. x 
ml, htmD-Cfc 1 ?, Capability Check^^Available-efc 
•9 ^ Component Name;JSc:¥tools¥jar¥enforcerl. jarT'fc 
•9 , Component Arguments :¥enforcement¥transcode#t 
ype#l. xslTfc* i 5 ft fit |R##£-f £ - £ £^-f o - 
WftfKli rtranscode#type#l t 1^ 5 ^gP^frSrjftfc-f-En 
forcement^lf #f lj)f R^Tfe <3 , enforcerl. jar £ ^ 5 
/p /7.M£transcode#type#l. xsl t 5 ^7 7* — 9 ~7 
7 4 JV^^Xf-^^VmthZ. t\CX <0g:Wr<Dm%L 20 
• fr"imx*hZ>] ^ Vn 5 -iSrlcftL-tV^,, 

[0 0 4 4] Jfcfc, ^gfl&fr^ LTA7J LfcaiSfcro^ 

2) 0 L-T, 7xy7°8 0 1 t>&# LfcCondition Ex 
pressionW^^, XTJ//8 0 2 X'M V ttJ ^ttfc^rf^ 

' (^<Sfe©^ftt Condition Expression t <Dffi.-fr%'fi\i^^ ^ 

u0kft*m$L-t 5 ±x (D&mm i>xm-&tmt>z * x 

y-*s*d»ofe*&t4, r^-fe'^^fF^ri 2-0 & a* l 
x^mzmj-fz 7/805) „ 

[0 0 4 5] £Lh<75j; 5('LT, Wfc*#«r*fifci-5£ 

^TtiliE $ tl/c ft 6> fi, ifcff * v^-yU 3 0 (d i S'^S 
^Wlfi-Zo w»i t^fl^v 5 ^— ^3 0— <D%tff1ra 

&i 2 ico#S;ii, fjifi^v^-zi-y 7 h*»feias*aiS 

ttfclffflsU^io (7 <5 Component Name t Component Argument 40 

roaa^fr-frSrfcHS:© y 7 h £ Ui^Lfctrot* 

So M/ili, ( (lotusxsl. jar, transcode. xsl) (domhas 
h. jar, signature, xml)) 77'fo<5 0 
[0 0 4 6] glOlt SWf^^a— /P3 O©«J&0J& 

^3 011, »^iA^/^jEM*1ittl#©3 1 £, XSL 
/n-fe yf 3 2 i: , -fy 74 V^flV 4 )V$ /p 9y 

^3 3k%mz-Zo m^^/%mimm^®3 1 

tti-fS. XSL7'ntj/f3 2|l, XMLf-^ill 50 
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<Dy~J\sXhh 0 7^^/0^7^3 311, XSL/ 
p ir y ir 3 2 X\ttmx% ft V > ft Soffit ^ Hilt" 

E1"-5r fitT^^^— ^3 0(^i Stiffs 

Sit, 7^7 7^2 1 O^ffroXMLSrWlC^fLT 

flfffl^l 2 114, XML3t*|C^-t5^m^-^^IS 
xEL/cX S Lf-i? t LT^Jg^ttSo 

[004 7] 01 Hi, #tff^i^-/U3 OlCiSflfj 
^atrlftPjl1-S7n-^^-h-T:-fo5 0 El 1 1 £#J$-f 

5^ *-f> »ta*/S3E^*ffl#II:3 ltt, xs 

L, ft»tt*5XMLttl 3 4}cMLT#tiA^ 
/li 0 1) 0 nt, ^^^3.-71^3 0 -5 ®a 

(i, mj)<DT7±^w^i 1 0 ['*ri-5ffffi[c^5i** 

^11 ocdt yt^MMtxh^T—pyrJ Mem 

m-r^m^yr^^xhim-B-hh^c ^ttn±, 

MAtfitftS:* 1 3 4 IcWRW^sEJItu— Ti/SrSffl LT 

r ktft>fr^tcM&\ax *°y ix-W« j tv ; ^-7H 0 

— T?txm-&1 3 O^ffoTRav^^-tirS (^/^/ 
110 2) 0 -^LT, *fy v— ffpffi^- 7H 0^T 

x y / 1 10 3) „ 
[0 0 4 8] *°y ^a-M OliJ; D T^ir 

©il Sr 55 1- 1 if L , h 5 > Mi— B#r - 9 L-Xft-o 

T7/1108) , *frw*mt-^*L7cr t^mfra 

fgtMiE^-v ; ^-7i'2 O&TJ^y v'-M^v^a-yH 0 
lca*qLTi^71-5 (777/110 9) „ Zh\££ 

ft^tfT^ir^^^^ffRji 3 1 i^eSo 
[0 0 4 9] jKy •>-fffcv ! a-;H Olci ^T^-fe 
7^ ^fp-sj § ftfcJf-^li, XSL/otj/t3 2#, 
*f*T$)5XMLXtl 3 4 ft $ (77771 

10 4). B^k^ii7)^L#»i 51-, mftbLXvm 
mft^MZ*. xsLT-eg|ailiT-#^v^#ii v xs 

L/p-iry-y-3 2 fc±oTflS-*fb J $ s 8a»L©fc»©ffi5* 
©**M*XML3:#1 3 4tjfAU-C*J<„ -tLT, 
*ig©^aii, m^^y ^^97u ? y 2*3 3iIioT 
tT5 (^7 7 71 105) „ 
[0 0 5 0] imi*! 2 1 k:fEUfiSnfc#T©SljWQ! 
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^BE^v^ — )V2 ORXPt'y *s— ffl^-^a- >V\ Ole 
0kftft$m tsntzzt £il*n Lx%k7~t% (x? v 7° l 
106 s 1107), XSL7°Pt 3 't32i7^y^ 

3 3 \Z. J: o T4fi£ £H/c#lfiig^XML 
X-^H, JEiff*$El 3 3 t LT, f-^flt^>/' 
TA2 2 0 Sr^LTx — ?77-l'^2 1 0 t#£M£*V 
5#\ £fc{i!J y— ^ hyy^=i— Kl 3 2 t-LTT^ 
ir*3r57.©|Hl#i 1 l 'i*(wT^-fe^S*i l Oco^f 
Tct-^LTlll^ttSo 10 
[0051] *»(7)ff#J^^v^fci#;W^^fe 

6c zzx\ Yy^^^—f^y^biX ^— coy— x 
Xm^ k tt/df $6£ T ^ ir ^ S*#»-ir =. !) x - 

■^/^mmm, m^f^-(^(Dm^^jt-^xy±—^ 

yY^^xmm-f^^h^^o w^Tfi, XML 

# fe 5 <d mmm & s*i- D ;©*!J ^-sum m«i t 

if^Oj: 9 idfEM^H^o acl(*, role (employee), doc 
(http://trl.ibm.eom/xmlform/X), read(Form)) <- tr 
anscode(X, xml, Form). 
[0 0 5 2] ^tttC^U 5^*^117^— AiHTML 
T*Sc^-fc ^ i V ^ T * dr * ® &#3Bfr h <D t 

?~acl (amano, role (employee) doc (http : //trl. ibm. com 30 
/xmlform/ travelExpenseAccount. xml ) , read (html) ) . 

Subject^ /K y 123$; Z^ir^g*#(-r 
ole (employee) t?— Jfe U T ir <D Object^ doc (h 

ttp://trl. ibm. com/xmlform/ travelExpenseAccount. xm 
1 )T\ ts]) is— |Sai(7)0bjectTfe5doc(http:// trl. i 
bm. com/xmlform/X) \^t*tl%>h<D<D s Operation T*fo 3 
read (html) LTtranscode (X, xml, Form) t V > 5 Cond 
itionj&Sftftt fe>ftT^5£>T\ ffffi^v^— ;V 

§ ^fiT ^ ir ^ SrfF Bit* 5 i: v ^ 5 U , 

transcode (travelExpenseAccount. xml, xml, html) 
[ 0 0 5 3 ] UJoT, T^t^ffli^fAlOO 

7t^*HTMLC3Etfet5fc6a)X S Lfa^iS^-x. 50 
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fe^So XSL7 D Di?^t3 2|l N £ COX S LfBiE t 

h ^ y^JEPJi: Ltft 5 ^ i»if 

* £ffP RT-f 5 t ^ 5 *ft£ffl« LTfc < 0 r 

acl (user (ID), role (subscriber) , doc (http:// trl. ib 
m. com/image/X) , read) <- embed (X, ID). 

[0 0 5 5 ] ^te^HSrffiV^Tx-^— (7)* 

--l/-;/3yt|LTn^ (log) 7 7 yu^60*t 5i 

^ -.co ^ i/- a ^i^n lt p ^ (as) ^ar(±*i^ 

acl (user (ID), role (issuer) , doc (http:// trl. ibm. co 
m/xmlform/X), write (*)) <- status (log (ID, issuer,. 
X, write, T)). 
[ 0 0 5 6] rtitJtL, ^±5ft7^t^« 

?~acl (amano, role(issuer) doc (http : //trl. ibm. com/x 
ml form/ travelExpenseAccount. xmlfilinputfi eld) , wri 
tercost=$100' r )). 

r(70i|r^ N Sub ject^TK y fE3zK\ T^±^S**l-r 
ole (issuer) T? — ifc 7 ^ ir ^^*CO0b ject^doc (htt 
p://trL ibm. com/xmlform/ travelExpenseAccount. xml# 
linputfield)T\ tf ] J i/— lBJS^)0bject"C&5doc(htt 
p:// trl. ibm. com/xmlform/X) Hzfrl% CO ?\ Opera 
tion"T?S> 5 write ("cost^lOO") (C^t t Tstatus (log (ID, 
issuer, X, write, T) t 0 Condition** H It bt^XV> 

5 0 status^j^Tto J: d^^^efestcot 

t5o 

status (log (Sub j, Role, Obj, Op, T) ) <- log (Sub j, R 
ole, Op, T). 
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status (log (Sub j, Role, Obj, Op, T)) <- makelog(Sub 
j, Role, Op, T). 

r * til og £ v > 5 tlf 9 fi* 1 1 4 Jxx v ^ 

ftV^CDT', status^M 1 ^tt^R5ci"5o fit, 

0 2 CD/t— /t-#M $ ttT, makelog (. . ) ft&ft- £ ft 3 
^#T^d^ff~SJift5 0 
[0 0 5 7] raakelogCOS^^Sltfcfl^v 5 ^— ;V3 

oc±, mi-3fiffi§^i 2 i Mm^x^-9^<D 
*ff bTSt#2) fcfei^, /Ky iy— |fii^> 5 ^-/n o i^xt 10 
^<DT9±^^l 3 0« N fiJ^tf^cDJ: 5fclffi*£tL 

?-acl(sysl, role(system) doc (http.://trl. ibm. com/xm 
lform/ travelExpenseAccount. xmltflog ) ,write(log(a 
mano, issuer, travelExpenseAccount. xmlftissuerFiel 
d, write ("cost=$100"))). 

^fior^-fe^s*i 3 oti, Sft^y s^-SIOSrffMi 

/^if^fci-f^ n ^©*fra*i*fi 1 i>*l„ Si- 5c 20 
(75 -fc*.B#fcoV*T t % SixS 1 £ \c i. 

oTT^-fe*#ff i £ tft5„ Lfdiot.fH 
5c©T ftXWMfcMLT, Z<Dv9tf79tx 

[0 0 58] iiOn /^©Sf MMIJ, 
a-xV V^©4&-£-£ H^|{c:XMLjt#K(0^^— ;u 

T->7tA ICS® LT*3 < o - tUi'GR Head" £ ^ 5 U 30 

p n p (cil-r 5 ft J; £ ttffl }c §§-f 5 AH* SrHfc M^.Lfc^ £ 
TfflA/^&Subject; ©fP^fi, #lff^3©^TB#[Cfg;S 
TffcSo •tLt, &Subject;cD$|3;9-£lll^©£tt£^:[:: 

g t & x fcfes! £ ^— it $g % mm l it mmmnMi 

it&XSL/Ptj/t3 2-eji!!iit5riHJ;!3, El 

[0 0 5 9 ] Rfc, ^HJfi^liSrffi^T^IW^^t 
T^-fe^f T ^I^T5*»?!l^oVNTm§ei-5o 4>9- 40 
* s> b ±T?AtL^R3BS:ff 5 »§\ r r Off «tt:firJ! fir 
0 ©{fpf^ft kiiSSA/T-k &V\| £ ^ 5 £ 5 fc*#Sr 

aaS6Kov>TRiP3-*-5,, ^<75J: 5ft#!) R#M:£ 

ft## T ^ d? *ff rT (Temporal Authorization) £ Pfff^X 

acl (AnyUserlD, role (employee) , doc (http: //announce 
/bonus, xml), read) :-get#time(T), T> "1999/06/0 50 
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3". 

r.Hfi, remployeeO— ;U§rKF03--if{±, http://ann 
ounce/bonus, xml 1 9 9 9 i£ 6 £ 3 0 $kWz b Urea 
dtSRBSr^oj £V>51cft-T?fc3„ Cl©*g\ get#time 
fc^5S'*7 L A3^i&^a£R^2a|S:3fcfc, 1 9 9 9^6^ 
3 B ± "9 fc^&fcf^fr^Wc^tU employeefibonus. 
xml}C^tLTread||PS^O- £^-?f 5„ 

[0 0 6 0] ^©i5*T^-fe^fF"srSrllffUfc*a- % ' 

ff , ^fAflta57 ^ d?*fjj'J#=P£fT 5 1r— i^x 
tA^p^ ^iSfctl^H Lfc»§\ **«read*SPI^ 
^V^B#M(temployee^readt?tTL4 5» ready ^d? 7 
Ire PlcnLtcb LTt, 79±*WM <Dfo\z. ->xfA 
*P'y*&tt5 £4£j£-$-5£» BtPfiT^-k^fFRT^i- 

/<co->^xA^ n y9\C%S LTI±, O S U^;UT'©T^ 
[0 0 6 1 ] ititMt, *IQt©»llB«r^llD*#f*f 

lasBii, <^©i 5 t-aig^ttSo 

acl (user (ID), role (employee) , doc (http: //announce/ 
bonus.xml), read) :- status (timestamp (S, T) ) , verif 
y#signature(S), T > "1999/06/03". 

[0 0 6 2] s-f\ iy~W^9a.~/ui 0^43V> 
T s ^S^D !ffi&©fP#£?T5o status (t 

imestamp(S, T)) ('H LT&.©yt— ^gEjfi^nTVS t 

status (timestamp (S, T) ) :- timestamp (S, T). 

status (timestamp (S, T) ) :- getfttimestamp (S, T) , make 

log (timestamp (S, T)). 

timestamp (S, T) £ ^ 5 9 4 -U 7, 9 yff— 9 (i, Sfc!J 

y-* K^3.^>-h4 o»c#ta4ti,Tv^v"«©-e; st 

atus©Miro^-^fJ^Uc-f5o *bt, M2C0;P-/U 
^jfiffl^tl/x get#timestamp(S, T), makelog (timestamp 
(S, T) ) i ft 5 # T 9 ± 7s ff fij t ft § „ veri 

fy#signature(S) £l > "1999/06/03"(i N !) ff-fffi 
^-^^.-/H 0 T? (if mX°% ft ^©T\ maiictT^t 

^^T^dr7,ff pj<tft2, 0 ft^ptl}^ get#timestamp(S, 
T) N makelog (timestamp (S, T)) N verify#signature 
(S) v ROT > "1999/06/03"^^^! i 3 irfto 

[0 0 6 3] iWc, #lfflltytliE^v ; ^-^2 OiCfc^ 
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Ofi, mi 4 5 fer-r^^ti/^ 

t^t^fSo SI 1 4 d^ctx— Condition Expr 

0(D^ N M^it^Sllff^^^^a Oc^Compon 
ent^$r^^Lfct)(7)-efe5o Ell 4 £>^— 7Vl^t*5V^ 
X, makelog/lft, 1 9ISc^makelogiSISSr*8ici-5 0 fo 
rmulajtexpressionfc U s fflUMISft 

a^3 0^ [timestamp#processor, get#timestamp 
(S, T)] N [logttprocessor, makelog(timestamp (S, T))] N 
[siganture#processor, verifyft signature (S) ] N JkT$ 
[formula#processor, T > " 1999/06/03"] ) ^flfrif* 1 
2 1 t LTi^x5 0 

[0 0 6 4] gtfr^a.— ;U 3 0^*5 V^T, 

get#timestamp(S, T) [£jSti~<5#!;S 

gettttimestampfl, ^ • 7°Pir yf.t J; <Q 20 

b hmrftm-fv JfyM.tfm&ZtlXi^Zo get#tiraest 
amp(S, T) getjftrust (timestamp, C) , get#timestamp 
(C, T, S) . £ r. X\ get#trust/2(i % f-? 7r-1 , ^2 1 
0^fetrust<D!Bji£&9W^I§Tfc3 o ^!j^(i5c<© 
X#tjfc<oJ: 5<CtrustflBJfi*sS)5il^Sr#^5 0 

trust (timestamp, "http://www.surety.com"). 
ittfi, STlr^tiniestampi UT"surety"^-{f ffi-f"^/! 
tSr**i-S 0 1 0 />>£>:£* 1 4 1 £ 

L/cfe§ft<!; LT, get#trust©3E«CfCtt % "http:/ 30 
/www. surety, com"^§iJ Ij fc^5 0 - ©Us get#time 
starap3zEfp(^ <t "9 Surety Timestamp Service/) ^fcH#^lJ 

Timestamp ServiceftSurety^pJtJaTt'S r £ ^^^L^C 

[0 0 6 5 ] makelog (timestamp (S, T)) 5 MS 

makelogii, P ^ • :/p ir y f\Z. ± V j&M&ff 0 0 P 

^■fe^S^l 3 0£$B?rt-5o 

acKsysl, role(system), doc (http: //announce/bonus, 
xmltflog), write) 

* b T „ f? S *° y ->-MiJ SrfFfiS-f srttioto^ 

1 0 0«Sn^fc*#ii^Srfr5*lfiS:«fo»e-, fttf^ 
v^— yW3 OWLT, ffiffi^v 5 ^— /H 0/)^ 

6>7^-fe^fF"5r* s *c?tu5o ClftClJ;^ makelogiilog 
(timestamp (signature#value, 1999/06/04) ) (D 9 4 ±\ 7. 

?yy°<DW^&ft?o 50 
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[0 0 6 6] verify#signature(S)tcM1"-5^a 
verifytfsignatureii, ^ 7°P i? yirtC «fc ^ilSrff 

5o A^^roS^SrtMEU Vaiidfcfe* 
(lEU^g) N InvalidJfcfcft (Hofc^-ig) £11 

1- 0 Jt£*S, Sur'etyCD^SiCttValid^iiRS-f 5 0 
[0 0 6 7] T > " 1999/06/03" (C Toff 

A^^^7°CDH#giJ(7)^ -fft;b-fel999/06/04-e&6o - 
frUt, T > "1999/06/03" /cWCMSIoSri: LTJI (IL 

[0 0 6 8 ] iil-k\c£ *) x iMfai«H*tE*^3.-yU 2 0 
/^bftfT-^v 5 ^— A- 3 O^b^fc, get#timestamp(S, 
T), makelog (timestamp (S, T)) , verif yftsignature (S) „ 
ISOn > * 1999/06/03" (D&mxm^ 1 2 ltt^-Cjti/i 
So Um^t-^y ~>-ffffi*v ! n.-/H 0 

l^$5V , >T^^$ttfc, acl (user (ID), role (employee) , 
doc (http: //announce/bonus. X ml) , read) ©^fe#fi^"C 

[0 0 6 9] r r T\ ftinicKK Lfc^FM^ftT ^ ir ^ 
fl : 'sr©mijB^*l*Six-CV^'r.i:S:tt93+5 0 ±|B©iw 
X'T > ir ^ asff-51 Sfifc*^ ^©i#W n 

i±, 94 j**9-yT*m&y \>m£^n\5-<&-r / ikxh% 

^oy^rof^IIUWfctLtt, 9Ak*9l/rf- 
[0 0 7 0] 

Stfc*tf T ^ ir x SrSTI" 1 1> 7 % <DT 9 ir xfp bJ 
■si 4a v ^ T Wffi S 5 Ifi H lc ft © *ft $r jftjE-j- 5 r 

[01 ] *^Jifecr)®ii^^}t5T^ir^$iJfp~>^xA 

[02] *H*© Jgigteja rt a r * -fe * SOW 77tA 

[0 3] T^irxSiJpi/^x-AW^-^i/^— ;K^AHi 
^tt-Sx— ^©F*3^S:^-f5x— ^k^fe5„ 
[04] 7 9±xfflWi/X^J±&7 9±x^$;$:f!l! ! m 

[05] *'!J ^-fFfrtv^— 7H 0(Ci5*°y 
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©ffMffi 7 ;k=?' U XA Srlft Si" 5 7 * — ir - h t? & S = 
[06] 7}f y ffffi^v^-zn 0tcAffi7j£;Jx5 

[17] ^y^si^^a^n oiatiiA^ns 

7*- 9 <D 5 t>, Stitx- 9 k *MR5*#<D 7t-v ? tt 

[08] ttfrtttfelfttE* -^-;v20icj;5 «fr!K«g 
&SET >P =f 0 X A 1" 5 7 p -t - h T? fe 3 . 
[09] ftfr&t&BSIE^ v 5 a -/w 2 0 MM V N 5 9 

[@i o] SMT^'-zi'S'oioWjfcWfcWEI-SB 

[II l] . $tfT^^-;W3 OfciSiWf^lSrlftW 
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* [012] f-^ ^ot^ 3 y(:M LX n ^7 

7 CO* # 5 Ufid [CtS^X , 7 ^ 

[01 3] 01 2©|ffi*fO£CTS*tn^iainS 
[014] fltf f£$tfiE^r a -yu 2 0 asffcfT*- v 5 a 

10 1 o - jK y v—fFffi^e v^-vK 2 0 • ■ •flfr^ffi^IE^ 
5^3.— ;K 3 O -'-flfT^-v^— /K 4 0 ••■ ]) V — 7, R=3f 

2 0 0-f 

-^flt-^, 2 10-f-?7r^, 2 2 0-7* 
-^flt/v'^Tiv, 2 3 0-3--ifS.EE-y-7^X7 i 
A, 2 4 o-T^-fe^JUf-^^rA 



1] 



^50 0 



-230 



220 




i4— 



-200 



[Hi o] 




XM L3t* 



(XS LIBSfi) 

z \ 



134 



^30 



xsL^nnry-y- 



-130 



tt frE^a.-^- ^3 3 



-133 



XML;£* 



[01 2] 



<xsl:t«tq>lBt« BBtch=V"> 
<xshcopy> 

<xsl:aDPly-tetiplates sef ect=**t |#*I cQtniiefit 0 I Pi 0 Jtext 0 "/> 

</xsI:copy> ~- 

<LoK disclDSedto<Wubjectj^ 

<xsl:for-each se\ezP?WfTmr {PartsNameL ='GR Head']]"> 
Parts -Name :GR Head 

Quantity :<xsl : ra.lue-of sel ect="Quantity"/> 

Del ever ly Dne:<xsl rvaiue-af sHlBct^Del !verlyOate"/> 

</xshfar-cach> 

</Ug> 

</«I:template> 
</xsl :atylesheet> 
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[02] 



111- 



7 

110 



10 



-112 



100 



nf **** r zx > 



It! 



. [r \7<?1zX ^121 

130 ^\ -K* MHM 



30 



40 



T 



133^ 



120 

WIT 



131 



( r^>X3— K 
132 



-134 



[03] 



Data Type 


Components 


Access Request 


(Subject Object. Role {or Uid) r Operation) 


External Condition 


(Condition-Listl 


Enforcement Instruction 


(Instruction-Set} 


Resource Retrieval 


XML Document 


Policy Retrieval 


XML Document (rule syntax) 


Resource Update 


XML Document 


Access Deny 


a string of "denied" 


Resource Transcode 


HTML, XML, string, etc. 



[SI 4] 



Condition Expression 


Cipafoi i ity 


CouDonent Kane 


nakeiog/l 


O 


logjrocessor 


get_tiinestamp/2 


O 


tiaestiBp_procesaor 


verlfy_s?gnature/l 


O 


si«oature_processDr 


fornu I ^expression 


O 


formal a_processor 



[04] 



401 



404 




406- 



-^30^^mt*^ o 



7<H?Xl*rRjin£ 




408 



7£-fcX^£Fnri20 



r£-fex^ir*ri3i£ini 
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115] 



[16] 



v 501 



502 



'503 




Alii* 



Object 7^^M^«ea-T-5^— ^-*Xl^M*fc 



Operation: 7mSJ*t^4^i|gjt 5f . 



Subject & Object f-ftLT Operation Kl&fftfc|g£ft^i*v£ 
IP HfttfS: 

Stijeot: Nihon Taron/EM/ Japan 
Object httjK//admlri.tH.cwn//fbnii/expen3ejcml 
Operation: roadflrlmf) 

query{user(Nihon Tjto k/IBMAJa pan}^ 

'http:// adrritn.lrLcorn//fbrm/expense,xnil' 1 
readOifcnl)). 



Object r^X^^m^j-r^'r-?. 
Operation: 

ContStion 0&ft&&&Z*ltzM** Subject *< Object K&L 
r Oparrtion CD*^»K^T3i:L^;U-/U. 

SufcuBct employee 

0bjacthttp://at^iin.trf.cora//form/Bxpan5e.)anl 
Opewtion: macKhtml) 
Oontfition: transcodeGn, txrt) 

aclLrDle(employee):http://a^in.tr!.com//for'ra/aJlpa^9e.Jcr^l , , 
read(Format» transcodetNlhon Taroh.xml, Format). 



*1^&fF 



[07] 



Environmerrt M'J->-WflB^fr3t<bUTfg5 a 

Nihon Tarob/IBM/ Japan tt^i— +f ft employee i:L^P— 

ErmrwrnflntfroJeCriihon Taroh/IBM/iJapan, ampJoyoo). 



ExtamalContftion: Trtyi'Hff ffi^Pa.—J^-eJtTf&^^H 
EjrtBmalComftion r*i2*f*J$?7KUi'H£Kl]<DCondTtion 

exDeme.anl £ html (c£&r&^;6<-e£<&*^5j!f>£jfclfc 
transcodefexpensejoml, html). 



[09] 



Capability Repository 



Condition Expraaaton: &r?tt*7^-trX£3£C>&#$& a 
Capability. ^gjC^^^^Tff-^VKCD^. 
Component Name: &#£&3ir£:3>7K--*>K . 
Component Argument * Vh05 § Ift* 

Condition Expression tt.*fr**La**«ti*fc:. T^XW 

Capability I* Capability Check *l/HcfeUxfr#lJ^ 

Component Name tt.jfeft^jUHSfi^P^Arji^K—*- 

Componont Argument l±* Z3>7fv— *>r-#tt35lft» 
Condition Expression COSIER U RUti?-?&J&-tf~.& a 

Condition Expression: trariBcods_type J (*.xml, htnW) 

Capability Cfceok: Availabte 

Component Name: eiWoole^arVenfomeHjar 

Component Arpiment e:¥errfbrcornont¥iran»cf>de..typo_1.xat 
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[128] 



imi i] 



c 



mm 



c 



.802 




^-803 


805 

? 











3 



M101 



-1102 





Yes 















M104 



M105 



No 



[Yes 



1108 





















i r 




C 




( ® 7 ) 



1109 



mi 3] 



<0rderList> 
<0rder> 

<PartsNare>Sp indie Motor</PartsKaitie> 

<PartsNo>1134</PartsHo> 

<ProductType>Micro Drive D-type</ProductType> 

<Quantlty>20<K/Quantlty> 

<DeiiveriyDate>19fl9/05/2t</Del ivarlyDate> 

</0rder> 

</0rder> 
</0rderUst> 



0 



<0rderLi$t> 
<0rder> 

<Pa rtsHame>Sp indie MotoK/Par tsNa*e> 

<PartsHo>J134</PartaNa> 

<ProductType>Mlcro Drive tJ-type</ProductType> 

<Quantity>20(K/{hiantity> • 

<DelivBrlyDate>l999/D6/21</DeilvariyDate> 

</0rder> 



</Qrder> 
</OrderLlat> 

<Lo& disclosedto="XYZ Corp. ">-| 
Part* Nane :GR Head 
Quantity :200 
Deteveriy Due: 1939/06/21 
Parts Hane :GR Head 
Quantity :300 
Del ever I y Due: 1999/07/21 - 1 

</Log> 
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(72)i§^# mm 

»^JIim^:ftrtJTtirai623|t*14 B^T 

ft 

W^JIim^ftrtfT®Wl623#lfil4 B^T 



#^jnm±?pmTarai623itai4 b*t 

ft 

F^— 5B017 AA01 BA05 BA07 BB02 BB10 

CA16 

5B082 AA11 EA10 EA11 EA12 GA14 
GC04 



